If you\'re using WeTransfer\'s free plan for client documents: files are not encrypted at rest, links have no access controls, and there\'s no audit trail. This likely does not meet IRS Pub 4557, GLBA, or HIPAA requirements.
Feature comparison
| Feature | WeTransfer | DeadVault |
|---|---|---|
| Primary purpose | Large file sending | Secure file delivery |
| Encryption at rest | ✕ | AES-256-GCM |
| Encryption in transit | TLS | TLS |
| Per-file encryption keys | ✕ | ✓ |
| Automatic file destruction | 7-day expiry | Custom deadline |
| Cryptographic erasure | ✕ | ✓ |
| Payment gates | ✕ | ✓ |
| Access controls (PIN) | Pro only | ✓ |
| Audit trail | ✕ | ✓ |
| Branded portal | Pro only | ✓ |
| File upload from recipients | ✕ | ✓ |
| Starting price | Free (2 GB) | $19/mo |
Why WeTransfer isn't built for this
WeTransfer is a consumer file transfer tool. Here's why that matters when the files are sensitive.
WeTransfer free links are public by default
On the free plan, anyone with the link can download the files. There's no password protection, no access controls, no audit trail. If that link gets forwarded, shared, or indexed. Your client's tax return is public. WeTransfer Pro adds password protection, but the free tier has none.
No encryption at rest on WeTransfer's free plan
WeTransfer encrypts files in transit with TLS, but files stored on their servers on the free plan are not encrypted at rest. Your client's W-2 sits on WeTransfer's infrastructure in readable form for up to 7 days. A breach during that window exposes the raw file.
No audit trail of who accessed what
WeTransfer tells you that a file was downloaded, but not by whom, from what IP, or how many times. For a CPA or attorney who needs to demonstrate compliance, there's no usable record. If the IRS or bar association asks who accessed a document, "someone clicked the link" isn't sufficient.
7-day window with no control
WeTransfer free links expire after 7 days. You can't extend them, shorten them, or revoke them early. You can't set a custom deadline aligned with your retention policy. And after those 7 days, the files are simply deleted, no cryptographic erasure, no proof of destruction.
Where WeTransfer is the right choice
WeTransfer is great at what it was designed for.
Common questions
Upgrade from free to secure
Same simplicity your clients are used to. Real encryption underneath. Set up in under 2 minutes.